Make a Privacy Complaint in NZ — Privacy Act (2026)
About this article
Sourced from New Zealand Acts of Parliament (legislation.govt.nz), regulations, and official government guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
If an organisation has misused your personal information — collected it unfairly, shared it without authority, refused you access, or failed to keep it secure — you can make a privacy complaint. You first raise it with the organisation; if that doesn't resolve it, you complain to the Office of the Privacy Commissioner (OPC) under Part 5 of the Privacy Act 2020.
The OPC investigates and tries to settle the complaint. If it can't be resolved and there's been an interference with your privacy, the matter can go to the Human Rights Review Tribunal, which can award damages (including for humiliation and loss of dignity). The OPC process is free.
When does it apply?
- An agency mishandled, over-collected, or wrongly disclosed your information.
- You were refused access or correction without a valid reason.
- You suffered harm from a privacy failure.
What to do to make a privacy complaint
- Complain to the organisation first and keep a record.
- Lodge a complaint with the OPC (privacy.org.nz, 0800 803 909) if unresolved.
- Keep evidence of any harm — financial, emotional, reputational.
- Escalate to the Human Rights Review Tribunal for damages if the OPC can't resolve it.
What should you NOT do?
- Don't skip the organisation — the OPC usually expects you to raise it there first.
- Don't delay — evidence and timelines matter.
About Data Privacy & Digital Rights in New Zealand
New Zealand's Privacy Act 2020 gives you real control over your personal information through 13 Information Privacy Principles (IPPs). You can access what an organisation holds about you (IPP 6) and ask it to correct mistakes (IPP 7), usually free and within 20 working days. Organisations that suffer a serious data breach must notify the Office of the Privacy Commissioner (OPC) and affected people. Complaints go to the OPC and, if needed, the Human Rights Review Tribunal, which can award damages. Government-held information is accessed under the Official Information Act 1982, and online harm is handled under the Harmful Digital Communications Act 2015.
OPC: 0800 803 909. Online harm (Netsafe): 0508 638 723.
Common Questions
What is the making a privacy complaint right in New Zealand?
If an organisation has misused your personal information — collected it unfairly, shared it without authority, refused you access, or failed to keep it secure — you can make a privacy complaint. You first raise it with the organisation; if that doesn't resolve it, you complain to the Office of the Privacy Commissioner (OPC) under Part 5 of the Privacy Act 2020.The OPC investigates and tries to settle the complaint. If it can't be resolved and there's been an interference with your privacy, the matter can go to the Human Rights Review Tribunal, which can award damages (including for humiliation...
When does it apply — making a privacy complaint?
An agency mishandled, over-collected, or wrongly disclosed your information.You were refused access or correction without a valid reason.You suffered harm from a privacy failure.
How do I make a privacy complaint in New Zealand?
Complain to the organisation first and keep a record.Lodge a complaint with the OPC (privacy.org.nz, 0800 803 909) if unresolved.Keep evidence of any harm — financial, emotional, reputational.Escalate to the Human Rights Review Tribunal for damages if the OPC can't resolve it.
What should you NOT do — making a privacy complaint?
Don't skip the organisation — the OPC usually expects you to raise it there first.Don't delay — evidence and timelines matter.